Microsoft’s public attestation that “Azure Linux includes this open‑source library and is therefore potentially affected” is correct — but it is a scoped product-level statement, not a categorical guarantee that no other Microsoft product contains the vulnerable Protocol Buffers C++...
